enterprise-multi-account-identity-permissions.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建资源目录结构，管理多账号身份与权限，支持自定义核心与应用目录及账户命名。
  en: Establish resource directory structures, administer multi-account identities
    and permissions, facilitating custom core and application directories alongside
    account naming conventions.
Parameters:
  FolderName1:
    Type: String
    Label:
      zh-cn: Core 资源目录名称
      en: Resource directory folder name
    AssociationProperty: AutoCompleteInput
    AssociationPropertyMetadata:
      Length: 5
      Prefix: core-
      CharacterClasses:
        - Class: lowercase
  FolderName2:
    Type: String
    Label:
      zh-cn: Application 资源目录名称
      en: Resource directory folder name
    AssociationProperty: AutoCompleteInput
    AssociationPropertyMetadata:
      Length: 5
      Prefix: application-
      CharacterClasses:
        - Class: lowercase
  AccountDisplayName:
    Type: String
    Label:
      zh-cn: Core文件夹下的账号名称
      en: The account name under the Core folder
    AssociationProperty: AutoCompleteInput
    AssociationPropertyMetadata:
      Length: 5
      Prefix: sandbox-account-
      CharacterClasses:
        - Class: lowercase
Resources:
  RDFolder1:
    Type: ALIYUN::ResourceManager::Folder
    Properties:
      FolderName:
        Ref: FolderName1
  RDFolder2:
    Type: ALIYUN::ResourceManager::Folder
    Properties:
      FolderName:
        Ref: FolderName2
  RDAccount1:
    Type: ALIYUN::ResourceManager::Account
    Properties:
      DeleteAccount: true
      DisplayName:
        Ref: AccountDisplayName
      FolderId:
        Fn::GetAtt:
          - RDFolder1
          - FolderId
Metadata:
  'ALIYUN::ROS::Interface':
    ParameterGroups:
      - Parameters:
          - FolderName1
          - FolderName2
          - AccountDisplayName
    TemplateTags:
      - 'acs:technical-solution:account:企业多账号身份权限集中管理-tech_solu_67'